Privacy Policy (The Crate)

Last updated: 7 January 2026

This Privacy Policy explains how The Crate collects, uses, stores, and shares personal information when you visit our website, enquire, book a tour, or use our services.

We take privacy seriously, and we aim to handle personal information in a way that’s fair, secure, and consistent with New Zealand’s Privacy Act 2020.

1) Who we are

In this policy, “The Crate”, “we”, “us”, and “our” refers to The Crate and its locations (Auckland North Shore and Hamilton).

2) The personal information we collect

Depending on how you interact with us, we may collect:

• Contact details (name, email address, phone number)

• Business details (business name, website, role)

• Enquiry details (what you’re looking for, preferred location, timeframe, message content)

• Booking/tour details (preferred day/time, location, service interest)

• Website usage information (pages visited, approximate location, device/browser information, and how you found us)

We only collect personal information that we genuinely need to run our business and respond to you.

3) How we collect your information

We may collect information when you:

• Fill in a form on our website (for example: enquiries, tour requests)

• Contact us by phone, email, or in person

• Interact with our social channels

• Browse our website (via cookies and analytics tools)

4) Why we collect it and how we use it

We use your information to:

• Respond to enquiries and provide information about our services

• Book tours, reply to requests, and follow up with you

• Provide services to members (where relevant)

• Improve our website and understand what content is useful

• Send updates or marketing (only where appropriate, and you can opt out at any time)

• Maintain security and prevent misuse of our services or systems

5) Cookies and analytics

Our website may use cookies and similar technologies to:

• Make the site function properly

• Understand how visitors use the site (so we can improve it)

• Measure performance of pages and content

We may use analytics tools such as Google Analytics 4 (GA4). GA4 uses IP addresses briefly for location signals, but Google states GA4 does not log or store individual IP addresses.

You can control cookies through your browser settings. Disabling some cookies may affect how the site functions.

6) Who we share personal information with

We do not sell your personal information.

We may share your information with trusted service providers who help us operate our website and services (for example: website hosting, form handling, analytics, email systems), but only where they need it to perform their services for us.

When we use service providers, we expect them to handle information securely and only for the purpose we’ve engaged them for.

7) Overseas storage and disclosures

Some of our service providers may store or process information outside New Zealand (for example, cloud hosting or analytics providers).

Where personal information is disclosed overseas, we take steps to ensure it is protected in a way that is consistent with New Zealand’s privacy requirements (including considerations under IPP 12).

8) How we protect your information

We take reasonable steps to protect personal information from loss, misuse, unauthorised access, disclosure, alteration, or destruction. This includes limiting access where appropriate and using reputable systems and providers.

No system is perfect, but we treat security as an ongoing priority.

9) How long we keep your information

We keep personal information only for as long as we need it for the purpose it was collected (and for any legal, accounting, or operational reasons that apply). When it’s no longer needed, we take steps to delete it or de-identify it.

10) Your rights: access and correction

You have the right to:

• Ask for access to personal information we hold about you

• Ask for correction if you believe it is wrong

If you’d like to make a request, contact us via the Contact page on our website and include enough detail for us to identify your information.

11) Marketing preferences

If we send you marketing messages, you can opt out at any time using the unsubscribe link (where available) or by contacting us and asking to be removed from marketing communications.

12) Privacy breaches

If we become aware of a notifiable privacy breach, we will take steps required under the Privacy Act 2020, which can include notifying affected individuals and the Privacy Commissioner as soon as practicable.

13) Complaints

If you have a concern about privacy, please contact us first via the Contact page so we can try to resolve it.

You can also contact the Office of the Privacy Commissioner if you’re not satisfied with our response.

14) Changes to this policy

We may update this Privacy Policy from time to time. The latest version will be published on our website, and the “Last updated” date will reflect the current version.